updates to docker image template based on feedback

* change base images to ubi9-minimal
* do all env2yaml related copying in 1 COPY
* use -trimpath in go build
* move other COPY to end of dockerfile
* don't run package manager upgrade

Author: jsvd

docker/templates/Dockerfile.erb

@@ -13,7 +13,7 @@
   <%   license = 'Elastic License' -%>
 <% end -%>
 <% if image_flavor == 'full' || image_flavor == 'oss' -%>
-  <%   base_image = 'docker.elastic.co/ubi9/ubi-minimal' -%>
+  <%   base_image = 'redhat/ubi9-minimal:latest' -%>
   <%   go_image = 'golang:1.23' -%>
   <%   package_manager = 'microdnf' -%>
 <% else -%>
@@ -26,13 +26,11 @@
 # Build env2yaml
 FROM <%= go_image %> as builder-env2yaml
 
-COPY env2yaml/env2yaml.go /tmp/go/src/env2yaml/env2yaml.go
-COPY env2yaml/go.mod      /tmp/go/src/env2yaml/go.mod
-COPY env2yaml/go.sum      /tmp/go/src/env2yaml/go.sum
+COPY env2yaml/env2yaml.go env2yaml/go.mod env2yaml/go.sum /tmp/go/src/env2yaml/
 
 WORKDIR /tmp/go/src/env2yaml
 
-RUN go build
+RUN go build -trimpath
 
 # Build main image
 # Minimal distributions do not ship with en language packs.
@@ -44,21 +42,10 @@ ENV LANG=<%= locale %> LC_ALL=<%= locale %>
 
 WORKDIR /usr/share
 
-COPY --from=builder-env2yaml /tmp/go/src/env2yaml/env2yaml /usr/local/bin/env2yaml
-COPY config/pipelines.yml config/log4j2.properties config/log4j2.file.properties config/
-<% if image_flavor == 'oss' -%>
-COPY config/logstash-oss.yml config/logstash.yml
-<% else -%><%# 'full', 'wolfi' -%>
-COPY config/logstash-full.yml config/logstash.yml
-<% end -%>
-COPY pipeline/default.conf pipeline/logstash.conf
-COPY bin/docker-entrypoint /usr/local/bin/
-
 # Install packages
 RUN for iter in {1..10}; do \
 <% if image_flavor == 'full' || image_flavor == 'oss' -%>
   <%= package_manager %> update -y && \
-  <%= package_manager %> upgrade -y && \
   <%= package_manager %> install -y procps findutils tar gzip && \
   <%= package_manager %> install -y openssl && \
   <%= package_manager %> install -y which shadow-utils && \
@@ -105,6 +92,16 @@ RUN addgroup -g 1000 logstash && \
   chmod 0755 /usr/local/bin/docker-entrypoint && \
   rmdir config
 
+COPY --from=builder-env2yaml /tmp/go/src/env2yaml/env2yaml /usr/local/bin/env2yaml
+COPY config/pipelines.yml config/log4j2.properties config/log4j2.file.properties config/
+<% if image_flavor == 'oss' -%>
+COPY config/logstash-oss.yml config/logstash.yml
+<% else -%><%# 'full', 'wolfi' -%>
+COPY config/logstash-full.yml config/logstash.yml
+<% end -%>
+COPY pipeline/default.conf pipeline/logstash.conf
+COPY bin/docker-entrypoint /usr/local/bin/
+
 WORKDIR /usr/share/logstash
 
 USER 1000